Static task
static1
Behavioral task
behavioral1
Sample
083e381d69e1a5a2bff12803ac20b8f2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
083e381d69e1a5a2bff12803ac20b8f2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
083e381d69e1a5a2bff12803ac20b8f2_JaffaCakes118
-
Size
6KB
-
MD5
083e381d69e1a5a2bff12803ac20b8f2
-
SHA1
6425825b3626523a3aab4d202cbd584d3e86f690
-
SHA256
e7e6212b8f7e39f762cfdcb0ab3db2dd35a1d8e2260bec58a65023ae35e8dc35
-
SHA512
75ce13e32dbb3677d3a724e1edfc0f1fc439bdaf0c3b5cb8c35e7ee1a66cbb80be5e8f111e285dc93666f9411685f231904f89ec2c96d9bed0ec84b79460576e
-
SSDEEP
96:5XMdtH81r1V+1lG/2HthblzTGT9cZANKEcM4gmkgcwQwTKXiB:5cdq1RV+1lG/OhpT1ZdM49kgUwuyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 083e381d69e1a5a2bff12803ac20b8f2_JaffaCakes118
Files
-
083e381d69e1a5a2bff12803ac20b8f2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE